Solved

Start/Restart Services Permissions

Posted on 2009-05-07
3
390 Views
Last Modified: 2012-05-06
What are the minimum permissions I need to grant for a user to connect to a Windows 2003 Domain Controller using the services mmc console to start and/or restart services?
0
Comment
Question by:DVation191
  • 2
3 Comments
 
LVL 83

Accepted Solution

by:
oBdA earned 500 total points
ID: 24325779
You first need to grant them the necessary permissions (read/start/stop/pause, RTOP in subinacl.exe), either through a group policy or through subinacl.exe
Check here for details:
How to grant users rights to manage services in Windows 2000
http://support.microsoft.com/kb/288129

Download details: SubInACL (SubInACL.exe)
http://www.microsoft.com/downloads/details.aspx?FamilyID=E8BA3E56-D8FE-4A91-93CF-ED6985E3927B

In addition, you need the following for remote access:
Non-administrators cannot remotely access the Service Control Manager after you install Windows Server 2003 Service Pack 1
http://support.microsoft.com/kb/907460
0
 
LVL 20

Author Comment

by:DVation191
ID: 24325963
I have granted the appropriate permissions using SubInACL for the services themselves, but the user still cannot connect to the services using the mmc console remotely.

The last link you provided describes using sc.exe, but I want the user to be able to use the MMC console. Am I missing something?
0
 
LVL 83

Expert Comment

by:oBdA
ID: 24326222
You need to run the command described in the 907460 article *once* on the server that hosts the service(s) you want to grant remote access to.
0

Featured Post

Microsoft Certification Exam 74-409

Veeam® is happy to provide the Microsoft community with a study guide prepared by MVP and MCT, Orin Thomas. This guide will take you through each of the exam objectives, helping you to prepare for and pass the examination.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

On a regular basis I get questions about slow RDP performance, RDP connection problems, strange errors and even BSOD, remote computers freezing or restarting after initiation of a remote session. In a lot of this cases the quick solutions made b…
Remote Apps is a feature in server 2008 which allows users to run applications off Remote Desktop Servers without having to log into them to run the applications.  The user can either have a desktop shortcut installed or go through the web portal to…
This video explains how to create simple products associated to Magento configurable product and offers fast way of their generation with Store Manager for Magento tool.
A short film showing how OnPage and Connectwise integration works.

919 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

21 Experts available now in Live!

Get 1:1 Help Now